用分层加密和扰动技术,在不牺牲隐私的前提下,让联邦学习快90%。
A Selective Homomorphic Encryption Approach for Faster Privacy-Preserving Federated Learning
- 选择性加密关键参数,结合差分隐私与位级混淆
- 比全同态加密快90%,且比同类方案快1.5倍
- 适合医疗影像等对延迟敏感的隐私保护场景
联邦学习(FL)已成为医疗领域保护隐私的机器学习关键技术,可在不共享客户端数据的情况下协同训练模型。然而现有安全方案面临根本矛盾:全同态加密(FHE)虽安全但计算开销大,轻量方案又易导致模型更新泄露数据。为此,我们提出FAS(Fast and Secure Federated Learning),通过选择性同态加密、差分隐私与位级扰动相结合,实现强安全防护而不依赖预训练。该方法动态加密高风险参数,无需额外计算开销。我们在11台物理机上基于Flower框架实现并评估,结果表明,相比直接在模型权重上应用FHE,FAS速度提升最高达90%;相较FedML-HE和MaskCrypt等竞争方案,计算开销更小,速度最高快1.5倍,且在医学影像数据集上的安全性和诊断准确率与传统FHE相当,有效抵御梯度反演攻击。此方案为对延迟敏感的医疗应用提供了兼顾隐私与效率的实用解决方案。
原文摘要 · Abstract (English)
Federated learning (FL) has come forward as a critical approach for privacy-preserving machine learning in healthcare, allowing collaborative model training across decentralized medical datasets without exchanging clients' data. However, current security implementations for these systems face a fundamental trade-off: rigorous cryptographic protections like fully homomorphic encryption (FHE) impose prohibitive computational overhead, while lightweight alternatives risk vulnerable data leakage through model updates. To address this issue, we present FAS (Fast and Secure Federated Learning), a novel approach that strategically combines selective homomorphic encryption, differential privacy, and bitwise scrambling to achieve robust security without compromising practical usability. Our approach eliminates the need for model pretraining phases while dynamically protecting high-risk model parameters through layered encryption and obfuscation. We implemented FAS using the Flower framework and evaluated it on a cluster of eleven physical machines. Our approach was up to 90\% faster than applying FHE on the model weights. In addition, we eliminated the computational overhead that is required by competitors such as FedML-HE and MaskCrypt. Our approach was up to 1.5$\times$ faster than the competitors while achieving comparable security results. Experimental evaluations on medical imaging datasets confirm that FAS maintains similar security results to conventional FHE against gradient inversion attacks while preserving diagnostic model accuracy. These results position FAS as a practical solution for latency-sensitive healthcare applications where both privacy preservation and computational efficiency are requirements.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。